Red Hat Satellite 6.18.7 includes security fixes for six CVEs: CVE-2026-5135 (broken access control allowing unauthorized host configuration changes), CVE-2026-5136 (privilege escalation via usergroup role manipulation), CVE-2026-5138 (information disclosure from improper nested request validation), CVE-2026-5142 (cross-tenant private SSH key disclosure via taxonomy scoping bypass), CVE-2026-32282 (root.Chmod following symlinks outside root), and CVE-2026-40192 (denial of service in Pillow via decompression bomb in FITS image processing). These vulnerabilities impact Foreman, yggdrasil-worker-forwarder, and python-pillow components within Red Hat Satellite and related packages. The advisory recommends applying the update after ensuring all prior errata are applied. No CVSS scores are provided, but the vendor rates the update as important.

The vulnerabilities allow unauthorized modification of host configurations, privilege escalation to administrator-level access, information disclosure including cross-tenant private SSH keys, potential symlink traversal leading to unauthorized file system access, and denial of service through crafted image files. These impacts could compromise system integrity, confidentiality, and availability of Red Hat Satellite-managed environments.

Red Hat has released Red Hat Satellite 6.18.7 which includes fixes for all listed vulnerabilities. Users should apply this update after confirming all previously released errata relevant to their systems are installed. Detailed update instructions are available in the Red Hat Satellite documentation. No additional mitigation steps are indicated by the vendor advisory.